Every CVE Search/ Get API key

CVE-2017-7553

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF)...

6.3 MediumFix available

CVE-2017-7553 is a medium vulnerability (CVSS 6.3) in Redhat Mobile Application Platform, published September 28, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. Fixed in fh-system-dump-tool 0:1.0.0-5.el7.

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.70%Down 0.2 points since Jul 1, 2022
90%50%10%1%

What each source reports

NVD Score used 6.3

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

Record
CVE-2017-7553
CVSS 3.0
6.3 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-918
Updated
2026-11-02
CVE List No score

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

Record
CVE-2017-7553
Updated
2026-11-02
EUVDEUVD-2017-16561 No score

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

Record
EUVD-2017-16561
Updated
2026-11-03
GitHub AdvisoriesGHSA-rmmq-9vg2-553m 6.3

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF)...

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

Record
GHSA-rmmq-9vg2-553m
CVSS 3.0
6.3 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-918
Updated
2026-11-02
OSVRHSA-2017:2674 7.5

Red Hat Security Advisory: Red Hat Mobile Application Platform security update

Record
RHSA-2017:2674
CVSS 3.0
7.5 HighCVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fh-system-dump-tool
Red Hat:mobile_application_platform:4.5
 before 0:1.0.0-5.el7
0:1.0.0-5.el7
fping
Red Hat:mobile_application_platform:4.5
 before 0:3.10-4.el7map
0:3.10-4.el7map
fping-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:3.10-4.el7map
0:3.10-4.el7map
nagios
Red Hat:mobile_application_platform:4.5
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-common
Red Hat:mobile_application_platform:4.5
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-devel
Red Hat:mobile_application_platform:4.5
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-plugins
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-all
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-apt
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
Show 77 moreShow less
Affected packages
PackageAffectedFixed
nagios-plugins-breeze
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-by_ssh
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-cluster
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dbi
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dhcp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dig
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-disk
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-disk_smb
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dns
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dummy
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-file_age
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-flexlm
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-fping
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-game
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-hpjd
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-http
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-icmp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ide_smart
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ifoperstatus
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ifstatus
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ircd
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ldap
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-load
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-log
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mailq
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mrtg
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mrtgtraf
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mysql
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-nagios
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-nt
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ntp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ntp-perl
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-nwstat
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-oracle
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-overcr
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-perl
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-pgsql
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ping
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-procs
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-radius
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-real
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-rpc
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-sensors
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-smtp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-snmp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ssh
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-swap
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-tcp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-time
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ups
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-uptime
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-users
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-wave
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
perl-Crypt-CBC
Red Hat:mobile_application_platform:4.5
 before 0:2.33-2.el7map
0:2.33-2.el7map
perl-Crypt-DES
Red Hat:mobile_application_platform:4.5
 before 0:2.05-20.el7map
0:2.05-20.el7map
perl-Crypt-DES-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:2.05-20.el7map
0:2.05-20.el7map
perl-Net-SNMP
Red Hat:mobile_application_platform:4.5
 before 0:6.0.1-7.el7map
0:6.0.1-7.el7map
phantomjs
Red Hat:mobile_application_platform:4.5
 before 0:1.9.7-3.el7map
0:1.9.7-3.el7map
phantomjs-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:1.9.7-3.el7map
0:1.9.7-3.el7map
python-meld3
Red Hat:mobile_application_platform:4.5
 before 0:0.6.10-1.el7map
0:0.6.10-1.el7map
python-meld3-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:0.6.10-1.el7map
0:0.6.10-1.el7map
qstat
Red Hat:mobile_application_platform:4.5
 before 0:2.11-13.20080912svn311.el7map
0:2.11-13.20080912svn311.el7map
qstat-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:2.11-13.20080912svn311.el7map
0:2.11-13.20080912svn311.el7map
radiusclient-ng
Red Hat:mobile_application_platform:4.5
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
radiusclient-ng-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
radiusclient-ng-devel
Red Hat:mobile_application_platform:4.5
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
radiusclient-ng-utils
Red Hat:mobile_application_platform:4.5
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
redis
Red Hat:mobile_application_platform:4.5
 before 0:2.8.21-2.el7map
0:2.8.21-2.el7map
redis-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:2.8.21-2.el7map
0:2.8.21-2.el7map
rhmap-fh-openshift-templates
Red Hat:mobile_application_platform:4.5
 before 0:4.5.0-11.el7
0:4.5.0-11.el7
rhmap-mod_authnz_external
Red Hat:mobile_application_platform:4.5
 before 0:3.3.1-7.el7map
0:3.3.1-7.el7map
rhmap-mod_authnz_external-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:3.3.1-7.el7map
0:3.3.1-7.el7map
sendEmail
Red Hat:mobile_application_platform:4.5
 before 0:1.56-2.el7
0:1.56-2.el7
ssmtp
Red Hat:mobile_application_platform:4.5
 before 0:2.64-14.el7map
0:2.64-14.el7map
ssmtp-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:2.64-14.el7map
0:2.64-14.el7map
supervisor
Red Hat:mobile_application_platform:4.5
 before 0:3.1.3-3.el7map
0:3.1.3-3.el7map

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 19 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open